Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: w36QW57rnKSBhGW4g8iPHASXB9PKImZMb67rlAteqDY=
Subject key identifier: 07:1A:7A:8B:A6:E3:06:55:E2:36:2F:46:FC:A4:35:D9:94:6E:B1:50
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 0194BBCEC7765589A024730AE0B7F61A6F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: vD9k/gPL09qK5J+cZE9YhdBaK6QssvEk91hAxfHFm7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:76:55:89:a0:24:73:0a:e0:b7:f6:1a:6f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=071a7a8ba6e30655e2362f46fca435d9946eb150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:52:ff:d9:e2:1d:30:73:6a:8c:0e:82:02:
6d:27:97:76:09:a0:68:ee:e6:3e:c6:6f:e8:c2:41:
84:dd:ad:d1:73:40:4d:67:5f:a1:8d:9b:9d:50:dc:
a6:2c:5a:28:da:f3:2a:d6:85:8e:7a:2a:3c:fd:fb:
2c:b0:6c:27:51:9b:5b:b6:5b:1c:d4:db:fe:34:80:
bc:43:83:cf:dc:d8:a4:fb:fe:2b:81:01:d8:0f:76:
e5:af:de:28:fb:22:4c:3f:91:cb:c1:b3:c6:4d:63:
bb:4b:45:a7:52:48:c5:e5:89:0c:9d:44:8e:5c:c3:
9d:a8:91:7b:ad:59:f5:da:76:2b:df:54:48:fa:f6:
3c:b9:ec:f5:d8:89:31:b4:c8:80:6c:03:fa:24:f4:
68:4a:67:be:86:e0:80:5d:2e:d7:01:dd:03:ec:cd:
1a:2c:1c:65:1a:b3:d6:d6:61:cd:40:c5:42:df:02:
ad:9c:f4:e7:97:a9:b9:80:f1:b1:8b:79:76:54:cf:
80:9a:54:a2:87:c3:fd:42:c1:73:6b:21:1a:6c:b1:
0e:e3:c4:9d:b3:33:e3:b9:21:c3:92:85:f1:74:51:
71:51:04:4c:9f:ef:fc:7b:05:8a:c9:10:d7:51:fb:
58:74:2d:25:8c:b9:5c:79:d1:b0:54:3c:36:65:11:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:7A:8B:A6:E3:06:55:E2:36:2F:46:FC:A4:35:D9:94:6E:B1:50
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3a:75:79:fa:0d:9b:be:31:b5:79:39:cd:25:09:29:ce:37:
25:fd:97:0e:15:f2:c4:1c:5c:32:fc:b9:9d:09:0d:87:5d:50:
48:62:9c:57:df:ac:fe:bd:d7:52:40:2d:8e:2a:70:40:96:85:
9f:a4:80:09:4f:b1:de:df:7b:05:27:e6:d1:2f:ba:14:0a:c7:
a5:d7:0a:4a:88:ee:6c:9c:88:35:a1:9e:97:23:a4:9c:69:d9:
01:8f:cd:35:ff:c5:73:b1:1b:46:8e:d0:4b:3d:dc:a0:63:a5:
b3:0b:f1:52:51:c0:8d:29:fa:9b:13:08:e1:af:23:79:4f:df:
93:b9:a6:92:fd:1d:5a:cf:8e:4b:55:af:53:6b:5b:16:3b:b1:
e5:62:00:44:ef:19:3d:ff:ff:0b:ad:fa:fb:41:68:4c:b9:0c:
d2:b4:fb:a4:58:26:d5:6b:d8:7d:2e:87:b6:13:0b:e0:d9:fb:
14:41:88:7a:09:41:2d:66:8f:3b:f4:41:68:58:eb:a6:0f:13:
f0:3f:95:c2:72:ad:39:7d:20:f5:4c:c8:b5:95:93:26:5b:9c:
30:ad:2b:d0:80:12:fb:95:4d:a1:83:44:c3:b4:e6:14:1d:9d:
5d:99:ff:a8:9f:46:48:01:ea:87:e5:a8:24:b3:bc:c2:f7:8c:
1d:15:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:46 2025 by rpki-client